Just-Dice.com : Invest in 1% House Edge Dice Game

[twentyseventy]

Quote from: Dabs on May 26, 2014, 11:57:14 PM

I build systems from parts. (I mean, most miners do, right?) Motherboard, RAM, Graphics, Hard Drive, etc. If you can do that, most people who can, know if a system they are building is secure or not.


This is completely false. Building a computer via parts is as easy as adding everything to a cart, purchasing it and snapping/screwing it all together when it arrives.

That is totally irrelevant to if, say, you're aware that newegg shipped your motherboard to the NSA and they had fun with your bios.

 

This is my thought as well. Some people have bought hardware that was already used as well even though it was being sold as new.

Posted From bitcointalk.org Android App

That's true.

Posted From bitcointalk.org laptop

Interesting. But it would never happen to me.

Posted by malware on the new cold wallet.

HE JUST SAID HE HAS MALWARE. EVERYONE DIVEST RIGHT NOW!!!!!!!!

But really, how do you know? The situation I was talking about was a guy who bought a premade computer that had a used HDD in it (it was a "brand new PC" and the HDD had been reformatted). He then got ahold of the owner and that person had sent it in for destruction but it apparently just got wiped and put in a brand new HP (I think it was).

Makes me think it could happen with other hardware as well though.

Really, you can't know. Just purchase a computer from a reputable big box store and use the OS Disc to do a reformat (or install Linux, of course).

Posted from that Laptop that Dooglus forgot in that hotel room that one time

[1715138649]

1715138649

[1715138649]

1715138649

[1715138649]

1715138649

[1715138649]

1715138649

[dooglus]

But really, how do you know? The situation I was talking about was a guy who bought a premade computer that had a used HDD in it (it was a "brand new PC" and the HDD had been reformatted). He then got ahold of the owner and that person had sent it in for destruction but it apparently just got wiped and put in a brand new HP (I think it was).

Makes me think it could happen with other hardware as well though.

Seems I don't know for sure. I guess it's a good sign that the cold wallet still has coins in it...

Is there an easy way to disable wireless on a laptop? In a way that malware can't re-enable? Most of the time there's only encrypted wifi around when I use it, but it would be better not to rely on that.

[ranlo]

Really, you can't know. Just purchase a computer from a reputable big box store and use the OS Disc to do a reformat (or install Linux, of course).

Posted from that Laptop that Dooglus forgot in that hotel room that one time

In another thread people were talking about BIOS viruses though (which could be added to mobos, and could even be infected by people working at manufacturing plants). Low chance? Certainly. But any possibility should be known about.

Also, I'm guessing you guys are making fun of that line when I post using my phone. I trust the app a bit but let me know if something happens and my account is hij-

Posted from TradeFortress. ALL UR BTC R BELONG TO ME!

[twentyseventy]

Really, you can't know. Just purchase a computer from a reputable big box store and use the OS Disc to do a reformat (or install Linux, of course).

Posted from that Laptop that Dooglus forgot in that hotel room that one time

In another thread people were talking about BIOS viruses though (which could be added to mobos, and could even be infected by people working at manufacturing plants). Low chance? Certainly. But any possibility should be known about.

Also, I'm guessing you guys are making fun of that line when I post using my phone. I trust the app a bit but let me know if something happens and my account is hij-

Posted from TradeFortress. ALL UR BTC R BELONG TO ME!

Ah, thanks for the clarification. Yes, when dealing with BTC the name of the game is security and nothing can be completely secure.

Hell, they found that mobo virus that could retransmit itself through the computer's speakers

I suppose you just have to try your best to secure your system and, if you have a lot of BTC, split it up amongst multiple 'points of failure'.

And, these days, I believe all our Hugs are belong to Tradefortress

[ranlo]

But really, how do you know? The situation I was talking about was a guy who bought a premade computer that had a used HDD in it (it was a "brand new PC" and the HDD had been reformatted). He then got ahold of the owner and that person had sent it in for destruction but it apparently just got wiped and put in a brand new HP (I think it was).

Makes me think it could happen with other hardware as well though.

Seems I don't know for sure. I guess it's a good sign that the cold wallet still has coins in it...

Is there an easy way to disable wireless on a laptop? In a way that malware can't re-enable? Most of the time there's only encrypted wifi around when I use it, but it would be better not to rely on that.

Some laptops have actual switches for disabling wifi. Or you can take out the card altogether and use a USB dongle.

FWIW, I wasn't putting you down or anything. I think you've done a great job with the site's security as seen by all the hacks that HAVEN'T been JD, .

[dooglus]

Is there a link that we can view that chart on whenever we want (an updated one) or did you have to generate it? I've seen a couple others you've posted that I wanted to follow as well. If you're generating them, is there any chance of you posting like monthly on the blog or something?

I generated the chart manually, and it brought my laptop to a standstill for 15 minutes or so.  It seems to use huge amounts of RAM for some reason.

I'll go back to posting weekly profit charts in this thread like I did for a while.

[dooglus]

IMPORTANT:

A lot of the bigger investors (and some of the smaller ones) have enabled 2FA to protect their accounts.  This is a great idea, and it helps a lot in the event that your computer is compromised.

However.  I often get emails from people who have lost their phones, or had them crash, or reset them, or upgraded, etc. and who therefore can no longer generate valid 6 digit 2FA codes.  They usually expect me to just turn 2FA off on their account.

This kind of misses the point.  If I were to just turn off 2FA whenever I was asked, what's the point of having it?

So please, if you have 2FA enabled, make sure you have a backup copy somewhere offline (on paper in a safe, for example) of either
1) the QR code you used to set it up
or
2) the 16 character string in bold under the QR code

The screen you see that sets it up says in bold letters at the bottom to make a backup of the code, but it seems people often fail to do so (the image is just a sample - this isn't YOUR 2FA secret):



If you already have 2FA enabled, but DON'T have a backup of the secret, you can edit your 2FA settings, disable 2FA, then re-enable it to see the QR code and 16 character secret again.

Please make sure you have a backup!

[SebastianJu]

Good that you mention it. In fact i thought the standard would be to ask for a reset when the email works. I didnt see such a code in all websites that offers 2FA so i never bothered to note it down. I guess i should print out the qr-code then, like you mention.

[boumalo]

Very interesting read; just-dice will make a lot of people a lot of money; dooglus is keeping the conversation active which is very reassuring

[dooglus]

Good that you mention it. In fact i thought the standard would be to ask for a reset when the email works. I didnt see such a code in all websites that offers 2FA so i never bothered to note it down. I guess i should print out the qr-code then, like you mention.

The QR code is nothing more than an encoding of the 16 character key, and a descriptive text "just-dice 123456" where 123456 is your account number, and which google-auth shows next to the 6 digit code so you know which site each code in your app is for.

You can set up a new device with 2FA either by scanning the QR code or by manually entering the 16 character key, so you only need to keep a copy of one of them.

Depending on your paranoia levels, you might want to consider whether your printer is keeping a copy of the QR code when you print it.  Some have long-term memories apparently.  Noting the code on paper and storing it somewhere safe is probably the best option.

[dooglus]

If you're generating them, is there any chance of you posting like monthly on the blog or something?

How about I post them here rather than in the blog?

Here's a chart showing the profit and expected profit since the big nakowa/mechs mess at the end of September 2013.  You can see the profit has followed the expected profit pretty closely, and in recent weeks has been rising a little faster than expected (click the charts for bigger versions):



And here are the last 3 weeks:

[nimda]

If you're generating them, is there any chance of you posting like monthly on the blog or something?

How about I post them here rather than in the blog?

Here's a chart showing the profit and expected profit since the big nakowa/mechs mess at the end of September 2013.  You can see the profit has followed the expected profit pretty closely, and in recent weeks has been rising a little faster than expected (click the charts for bigger versions):

https://i.imgur.com/pxH5rHe.png

And here are the last 4 weeks:

Out of curiosity, I noticed that all of those have separate adjustment constants. Are you making those up manually or doing some kind of programmatic fitting?

[ondratra]

Are their any plans for making LTC mutation of this glorious page? I would love to invest there

[ranlo]

If you're generating them, is there any chance of you posting like monthly on the blog or something?

This post was perfect! I just like seeing the charts because it helps give a more in-depth view of how it's all going, .

Is it also possible to do them based on # of bets/day and # of BTC wagered? Or weekly? I've been noticing that it looks like there are far less bets going on now as compared to around a month ago.

Thanks!

[dooglus]

Out of curiosity, I noticed that all of those have separate adjustment constants. Are you making those up manually or doing some kind of programmatic fitting?

I'm just trying to get the lines to start close to each other at the beginning of the chart.

[dooglus]

This post was perfect! I just like seeing the charts because it helps give a more in-depth view of how it's all going, .

Is it also possible to do them based on # of bets/day and # of BTC wagered? Or weekly? I've been noticing that it looks like there are far less bets going on now as compared to around a month ago.

I don't plot any of that kind of data except that the slope of the green line tells you the betting volume since expected profit is exactly 1% of total volume.

https://bitcoinproject.net/justdice.php has live charts of the kinds of things you're asking about.

[romerun]

I have a script which creates a raw transaction from outputs known to be in the cold wallet and sends them to my online wallet.  I just tell it which outputs and it makes the (unsigned) raw transaction that sends them.

I then transfer the unsigned transaction to the cold wallet using a QR code and a webcam, sign it on the cold wallet, and transfer the signed transaction back online, again using a QR code and a webcam.

what a great idea. The cold wallet hardware is totally disconnected from internet. I wish this approach be implemented for broader bitcoin users. Practically, the cold wallet computer may be replaced with a raspberry pi with screen and camera, or even an encrypted phone cut off from internet. One attack vector would be, hackers plant trojans on the script to create rogue tx, but this can be visually verified on the cold wallet hardware end, before signing. Along with BIP32 wallet so that the change won't be messed up.

[willBTC]

Is there an application that people will get an E-mail notification when the site's profit down to a certain point which use could set ?

[dooglus]

Along with BIP32 wallet so that the change won't be messed up.

There's never any change. The cold wallet address has lots of 500 btc outputs which I send as whole units.

[dooglus]

Is there an application that people will get an E-mail notification when the site's profit down to a certain point which use could set ?

I provide a simple JSON page at /api/info which could be used by a third party to offer such a service.